INCIDENT 2026-08-28 12:44:13 trigger: php_rss=1691MB ================================================================== load: 3.26 2.43 1.93 9/633 2787777 ncpu:10 mem_avail: 7470MB/13777MB (54.2%) swap_used:823MB swapout:377/s blocked(D):0 running:7 iowait:0.1% steal:0.0% php: 13 procs / 1691MB heaviest user: madalice (5 procs, 775MB) apache: 48 procs tcp_estab: 61 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2311 root 251 1066 nobody 47 875 madalice 5 775 evolution 11 723 mailman 20 377 netdata 7 199 customc 1 143 cpanellogin 1 113 alison 2 101 wp-toolkit 3 96 dovenull 6 60 mailnull 4 55 named 1 32 zabbix 1 25 kurri 2 25 dovecot 3 25 vinesit 1 15 polkitd 1 14 rpc 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 5 775 evolution 5 630 customc 1 144 alison 1 87 root 1 29 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6558 MB Active(file): 4912 MB Inactive(file): 2003 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 679 MB CommitLimit: 10984 MB Committed_AS: 8573 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 10:25:32 11676 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2366464 17.7 Ssl 10:25:01 /usr/sbin/mariadbd 529388 527476 root 193436 0.1 S 10:19:54 spamd child 2787729 2787723 evolution 189712 98.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2787733 2786398 evolution 180200 79.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 171544 2.0 Ssl 10:24:30 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2786668 510022 madalice 159624 23.8 S 01:06 php-fpm: pool madalice_com_au 2786670 510022 madalice 159068 23.1 S 01:06 php-fpm: pool madalice_com_au 2786676 510022 madalice 159036 22.6 S 01:06 php-fpm: pool madalice_com_au 2786669 510022 madalice 158296 23.5 S 01:06 php-fpm: pool madalice_com_au 529389 527476 root 157972 0.0 S 10:19:54 spamd child 2786671 510022 madalice 157764 21.7 S 01:06 php-fpm: pool madalice_com_au 2787735 2769959 evolution 157032 77.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2787736 2786025 customc 156388 72.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1890416 1353308 cpanellogin 116716 0.0 S 03:59:10 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 527476 1 root 107612 0.0 Ss 10:21:33 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2787738 2786791 alison 93876 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 65032 0.0 Sl 10:24:27 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 938582 1 wp-toolkit 56372 0.0 Ss 08:32:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509266 1 root 42984 0.0 Ss 10:24:27 /usr/lib/systemd/systemd-journald 1353308 1 root 42504 0.0 Ss 37-10:02:53 cpsrvd (SSL) - waiting for connections 938585 1 wp-toolkit 35904 0.0 Ss 08:32:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 508634 1 named 33360 0.0 Ssl 10:24:35 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1469 1 root 32956 0.1 Ss 60-02:34:22 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 30532 0.0 Ss 10:24:23 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 526869 1 root 29768 0.0 Ss 10:21:56 lfd - sleeping 4180059 4180015 evolution 28748 0.0 Ss 12:44:12 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 481558 1 root 27384 0.1 Ssl 10:26:54 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 483898 1 zabbix 26184 0.2 Ssl 10:25:44 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2767681 506832 nobody 23980 0.0 S 07:00 /usr/sbin/httpd -k start 2767682 506832 nobody 23312 0.0 S 07:00 /usr/sbin/httpd -k start 2768824 506832 nobody 22932 0.1 S 05:28 /usr/sbin/httpd -k start 1463 1 root 22892 0.0 Ss 60-02:34:22 tailwatchd 509098 1 root 22796 0.0 Ss 10:24:28 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 2784635 506832 nobody 22696 0.0 S 03:26 /usr/sbin/httpd -k start 2769959 506832 nobody 22424 0.0 S 04:29 /usr/sbin/httpd -k start 2785234 506832 nobody 22376 0.0 S 02:59 /usr/sbin/httpd -k start 2766868 506832 nobody 22108 0.0 S 07:56 /usr/sbin/httpd -k start 2786344 506832 nobody 22060 0.1 S 01:30 /usr/sbin/httpd -k start 2785479 506832 nobody 22040 0.2 S 02:35 /usr/sbin/httpd -k start 2786025 506832 nobody 21868 0.2 S 01:58 /usr/sbin/httpd -k start 2785220 506832 nobody 21852 0.0 S 03:00 /usr/sbin/httpd -k start 2769962 506832 nobody 21676 0.1 S 04:29 /usr/sbin/httpd -k start 2785775 506832 nobody 21580 0.0 S 02:14 /usr/sbin/httpd -k start 2769981 506832 nobody 21536 0.0 S 04:28 /usr/sbin/httpd -k start 508867 508814 mailman 21516 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508857 508814 mailman 21460 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508856 508814 mailman 21456 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508864 508814 mailman 21444 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508863 508814 mailman 21440 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 2786386 506832 nobody 21384 0.1 S 01:29 /usr/sbin/httpd -k start 508861 508814 mailman 21364 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 2785773 506832 nobody 21348 0.0 S 02:14 /usr/sbin/httpd -k start 508865 508814 mailman 21344 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 508859 508814 mailman 21072 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 2786089 506832 nobody 21020 0.0 S 01:51 /usr/sbin/httpd -k start 2785758 506832 nobody 20876 0.0 S 02:15 /usr/sbin/httpd -k start 2785748 506832 nobody 20736 0.0 S 02:16 /usr/sbin/httpd -k start 2786398 506832 nobody 20712 0.1 S 01:28 /usr/sbin/httpd -k start 508862 508814 mailman 20668 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 508854 508814 mailman 20664 0.0 S 10:24:33 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------------------+------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------------------+------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2474944 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 2474935 | customc_wp_4eia2 | customc_wp_mjkcu | Query | 0 | Preparing | SELECT 11jOh6_posts.ID FROM 11jOh6_posts LEFT JOIN 11jOh6_term_relationships ON (11jOh6_posts.ID = 11jOh6_term_relationships.object_id) WHERE 1=1 AND 11jOh6_posts.post_name IN ('404') AND ( 11jOh6_term_relationships.term_taxonomy_id IN (22) ) AND 11jOh6_posts.post_type = 'wp_templ | +---------+------------------+------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 424 evolution/portal.evolutionerp.com.au-ssl_log 180 coscom/coscom.com.au 115 aaa/aaadownunder.com.au-ssl_log 113 coscom/coscom.com.au-ssl_log 86 alison/alisonarts.com.au-ssl_log 67 madalice/madalice.com.au-ssl_log 51 alison/alisonarts.com.au 46 speedlin/speedlinefencing.com.au-ssl_log 32 customc/customcentral.com.au-ssl_log 13 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 299 203.54.180.238 124 103.104.164.114 115 4.205.62.107 107 68.155.159.216 100 74.248.24.12 86 20.63.81.20 82 14.1.95.251 70 103.104.165.99 47 212.36.35.110 32 20.52.41.200 13 104.28.125.10 11 120.21.147.42 9 40.83.93.50 7 118.127.40.55 5 1.145.102.184 --- top request paths across all vhosts (last 3 min) --- 167 POST /functions.php 85 GET /app/ajax.php 55 GET /factory_session_checker.php 53 GET /index.php 51 GET /heartbeat.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 26 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 13 POST /app/ajax.php 8 POST /purchaseaddsave.php 5 HEAD /index.php 5 GET /radio.php 5 GET /plugins/fensa/fensa-ajax.php 5 GET /goods.php 5 GET / 4 POST /quoteditsave.php 4 POST /inveditsave.php 4 POST /clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 167 POST /functions.php 85 GET /app/ajax.php 44 GET /index.php 26 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 13 POST /app/ajax.php 8 POST /purchaseaddsave.php 5 HEAD /index.php 5 GET /plugins/fensa/fensa-ajax.php 4 POST /quoteditsave.php 4 POST /inveditsave.php -- last 10 requests -- 103.104.164.114 - - [28/Aug/2026:12:44:10 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=13438468673 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [28/Aug/2026:12:44:10 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D70155&call=getUserSetting&caller=ajaxSubmitLocal&seq=16109988527 HTTP/1.1" 200 117 103.104.164.114 - - [28/Aug/2026:12:44:10 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%2050&include=&supplierid=351&contactid=351&tid=%25%25&returnobj=itemFil 103.104.164.114 - - [28/Aug/2026:12:44:10 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D70155&call=getUserSetting&caller=ajaxSubmitLocal&seq=13388483051 HTTP/1.1" 200 104 "https://my.evolu 14.1.95.251 - - [28/Aug/2026:12:44:10 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 11952 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=3489" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 14.1.95.251 - - [28/Aug/2026:12:44:11 +1000] "GET /index.php?page=invedit&id=3489&string= HTTP/1.1" 200 34570 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=3489" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 14.1.95.251 - - [28/Aug/2026:12:44:11 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3489&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.164.114 - - [28/Aug/2026:12:44:11 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70155" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 14.1.95.251 - - [28/Aug/2026:12:44:11 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D3489%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=14086080563 HTTP/1.1" 200 110 "https://my.evo 103.104.164.114 - - [28/Aug/2026:12:44:11 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 16634 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70155" "Mozilla/5.0 (Windows NT 10.0; Win6 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 55 GET /factory_session_checker.php 51 GET /heartbeat.php 28 GET /factory_session_processed_qty.php 28 GET /factory_session_joiner.php 9 GET /index.php 3 POST /factory_functions.php 2 GET /uploadsave.php 1 POST /uploadsave.php 1 POST /login.php 1 POST /inventory.php 1 GET /userlogin.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:12:44:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 147 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:12:44:02 +1000] "GET /factory_session_joiner.php?id=34943 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:12:44:03 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:12:44:02 +1000] "GET /heartbeat.php?sentAt=1787885042&bytes=106,144,245,242&_=1787835394358 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:12:44:04 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:12:44:04 +1000] "GET /factory_session_joiner.php?id=34942 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:12:44:06 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:12:44:06 +1000] "GET /heartbeat.php?sentAt=1787885044&bytes=106,144,245,244&_=1787865013914 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:12:44:07 +1000] "GET /heartbeat.php?sentAt=1787885047&bytes=106,144,245,247&_=1787883537763 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [28/Aug/2026:12:44:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == coscom/coscom.com.au == -- top paths -- 1 GET /zz.php 1 GET /zaza.php 1 GET //xza.php 1 GET //xve22.php 1 GET /xp.php 1 GET /xin1.php 1 GET /xda.php 1 GET /X57.php 1 GET /ws62.php 1 GET /wpver.php 1 GET /wp-tem.php 1 GET /wp-konfig.php -- last 10 requests -- 4.205.62.107 - - [28/Aug/2026:12:44:07 +1000] "GET /snq.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:07 +1000] "GET /aws_credentials.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:07 +1000] "GET /v1.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:08 +1000] "GET /olfclass.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:08 +1000] "GET //wp-includes/js/tinymce/themes/inlite HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:08 +1000] "GET /abcd.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:08 +1000] "GET /userfuns.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:08 +1000] "GET /register.php HTTP/1.1" 404 - "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:09 +1000] "GET /php-info.php HTTP/1.1" 403 12 "-" "-" 4.205.62.107 - - [28/Aug/2026:12:44:09 +1000] "GET /xin1.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-28 12:41:52 L1=2.27 run=5 blk=0 avail=8366 (60.7%) swpO=0 conn=3 myRSS=2317 php=8 phpRSS=777 ap=38 tcp=39 topuser=madalice 2026-08-28 12:41:52 L1=2.27 run=3 blk=0 avail=8455 (61.4%) swpO=0 conn=5 myRSS=2317 php=7 phpRSS=657 ap=38 tcp=39 topuser=madalice 2026-08-28 12:42:02 L1=2.47 run=3 blk=0 avail=8341 (60.5%) swpO=0 conn=4 myRSS=2317 php=8 phpRSS=755 ap=41 tcp=51 topuser=madalice 2026-08-28 12:42:02 L1=2.47 run=5 blk=0 avail=8323 (60.4%) swpO=0 conn=5 myRSS=2317 php=7 phpRSS=748 ap=41 tcp=50 topuser=madalice 2026-08-28 12:42:12 L1=2.56 run=6 blk=0 avail=8661 (62.9%) swpO=0 conn=4 myRSS=2317 php=5 phpRSS=408 ap=36 tcp=45 topuser=alison 2026-08-28 12:42:12 L1=2.56 run=4 blk=0 avail=8610 (62.5%) swpO=0 conn=4 myRSS=2317 php=5 phpRSS=450 ap=36 tcp=46 topuser=alison 2026-08-28 12:42:22 L1=2.62 run=3 blk=1 avail=8381 (60.8%) swpO=1 conn=4 myRSS=2317 php=6 phpRSS=625 ap=47 tcp=57 topuser=alison 2026-08-28 12:42:22 L1=2.62 run=3 blk=1 avail=8465 (61.4%) swpO=1 conn=4 myRSS=2317 php=5 phpRSS=515 ap=47 tcp=57 topuser=alison 2026-08-28 12:42:32 L1=2.84 run=6 blk=0 avail=8356 (60.7%) swpO=0 conn=4 myRSS=2317 php=11 phpRSS=840 ap=41 tcp=59 topuser=alison 2026-08-28 12:42:32 L1=2.84 run=6 blk=0 avail=8304 (60.3%) swpO=0 conn=4 myRSS=2317 php=11 phpRSS=887 ap=42 tcp=58 topuser=alison 2026-08-28 12:42:42 L1=2.94 run=4 blk=0 avail=8656 (62.8%) swpO=0 conn=4 myRSS=2317 php=5 phpRSS=393 ap=39 tcp=59 topuser=alison 2026-08-28 12:42:42 L1=2.94 run=4 blk=0 avail=8625 (62.6%) swpO=0 conn=4 myRSS=2317 php=5 phpRSS=418 ap=40 tcp=60 topuser=alison 2026-08-28 12:42:52 L1=3.09 run=5 blk=0 avail=8569 (62.2%) swpO=0 conn=4 myRSS=2317 php=5 phpRSS=429 ap=44 tcp=48 topuser=alison 2026-08-28 12:42:52 L1=3.09 run=7 blk=0 avail=8544 (62.0%) swpO=0 conn=4 myRSS=2317 php=7 phpRSS=532 ap=44 tcp=49 topuser=alison 2026-08-28 12:43:02 L1=2.92 run=1 blk=0 avail=8744 (63.5%) swpO=0 conn=2 myRSS=2318 php=3 phpRSS=254 ap=37 tcp=46 topuser=alison 2026-08-28 12:43:02 L1=2.92 run=2 blk=0 avail=8716 (63.3%) swpO=0 conn=4 myRSS=2318 php=4 phpRSS=295 ap=37 tcp=48 topuser=alison 2026-08-28 12:43:12 L1=3.10 run=6 blk=0 avail=8112 (58.9%) swpO=0 conn=2 myRSS=2318 php=7 phpRSS=953 ap=38 tcp=48 topuser=madalice 2026-08-28 12:43:12 L1=3.10 run=5 blk=0 avail=8154 (59.2%) swpO=0 conn=5 myRSS=2318 php=8 phpRSS=935 ap=38 tcp=48 topuser=madalice 2026-08-28 12:43:22 L1=3.00 run=5 blk=0 avail=7991 (58.0%) swpO=0 conn=2 myRSS=2318 php=9 phpRSS=1008 ap=44 tcp=48 topuser=madalice 2026-08-28 12:43:22 L1=3.00 run=4 blk=0 avail=8124 (59.0%) swpO=0 conn=5 myRSS=2318 php=8 phpRSS=878 ap=44 tcp=49 topuser=madalice 2026-08-28 12:43:32 L1=2.77 run=2 blk=0 avail=8144 (59.1%) swpO=0 conn=2 myRSS=2318 php=10 phpRSS=929 ap=44 tcp=50 topuser=madalice 2026-08-28 12:43:32 L1=2.77 run=5 blk=0 avail=8116 (58.9%) swpO=0 conn=5 myRSS=2318 php=9 phpRSS=931 ap=44 tcp=50 topuser=madalice 2026-08-28 12:43:42 L1=2.81 run=5 blk=0 avail=8069 (58.6%) swpO=1 conn=2 myRSS=2318 php=9 phpRSS=998 ap=42 tcp=48 topuser=madalice 2026-08-28 12:43:43 L1=2.81 run=4 blk=0 avail=8053 (58.5%) swpO=1 conn=5 myRSS=2318 php=9 phpRSS=1016 ap=42 tcp=51 topuser=madalice 2026-08-28 12:43:52 L1=3.00 run=3 blk=0 avail=8070 (58.6%) swpO=17 conn=2 myRSS=2318 php=8 phpRSS=998 ap=40 tcp=52 topuser=madalice 2026-08-28 12:43:53 L1=3.00 run=4 blk=0 avail=8073 (58.6%) swpO=17 conn=5 myRSS=2318 php=10 phpRSS=1049 ap=40 tcp=50 topuser=madalice 2026-08-28 12:44:02 L1=3.23 run=3 blk=0 avail=8101 (58.8%) swpO=0 conn=3 myRSS=2318 php=9 phpRSS=958 ap=44 tcp=43 topuser=madalice 2026-08-28 12:44:03 L1=3.23 run=4 blk=0 avail=8072 (58.6%) swpO=0 conn=5 myRSS=2318 php=10 phpRSS=1024 ap=44 tcp=43 topuser=madalice 2026-08-28 12:44:13 L1=3.26 run=7 blk=0 avail=7470 (54.2%) swpO=377 conn=7 myRSS=2311 php=13 phpRSS=1691 ap=48 tcp=61 topuser=madalice 2026-08-28 12:44:13 L1=3.26 run=14 blk=0 avail=7537 (54.7%) swpO=532 conn=6 myRSS=2311 php=12 phpRSS=1600 ap=48 tcp=60 topuser=madalice